Beveiligingsadvies

CVE-2026-86554

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-20 07:55:08

Laatst bijgewerkt 2026-09-21 18:07:35

Toegewezen door zte

CVSS-score 4.3

Status PUBLISHED

Beschrijving

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process. With the obtained SmartLife application authentication parameters, attackers can directly invoke the backend interface /account/verify.serv to determine whether a target email address is registered for a SmartLife account. If the account exists, the real backend account ID can also be retrieved.

← Alle CVE's bekijken Bekijk op cve.org ↗